Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
File:                     z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft (raw, json)
Hash identifier:          xzt9HuQAibqPjifjiI/JIqOy4TV1IMjGPwcJ4J/e2q4=
Subject key identifier:   09:C2:7F:26:47:FE:95:11:F8:CB:0D:71:E6:71:69:F8:5B:D7:2A:29
Authority key identifier: CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
Certificate issuer:       /CN=cfc025a9d55bfd643757da4d499dce17201774d2
Certificate serial:       019D265F6136889E2619D2465C4DA142EBC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 19:01:18 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:18 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:18 +0000
Files and hashes:         1: UeUe4RXxbJQuYIv96jVkIPMvTEA.roa (hash: rx3GrZrvfU17csdIhw9Rnh2rg66M56CJ6Ya4mGIIvXs=)
                          2: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl (hash: MlbXm6iJLcMGDxlnc18U6qMk4rEF5f+dokTTJu1wwKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:61:36:88:9e:26:19:d2:46:5c:4d:a1:42:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfc025a9d55bfd643757da4d499dce17201774d2
        Validity
            Not Before: Mar 25 19:01:18 2026 GMT
            Not After : Mar 26 19:01:18 2026 GMT
        Subject: CN=09c27f2647fe9511f8cb0d71e67169f85bd72a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ac:a6:6f:b8:63:d4:3c:a6:e3:4a:8f:b3:9d:
                    db:2e:e1:37:9c:73:14:db:47:53:09:0f:4c:70:72:
                    0c:03:03:d2:0a:c5:ea:02:bf:61:7c:bd:6a:d6:91:
                    8f:de:46:51:42:62:2f:77:8d:13:58:d6:70:58:cb:
                    5a:92:e6:6f:0d:8d:f3:90:71:f2:b0:04:8e:82:1e:
                    d9:8b:dc:74:af:85:33:5a:42:db:4f:18:c2:da:46:
                    fb:b1:24:8a:96:50:3a:c7:9e:6c:0d:19:93:05:1c:
                    a8:51:c6:4d:c4:46:43:ed:06:c1:83:4a:0d:95:aa:
                    d1:16:bf:95:dc:51:3b:e1:d7:01:d4:02:e6:35:d3:
                    0f:e1:60:59:c3:56:0e:ae:62:e0:1c:3d:69:05:46:
                    30:0e:a7:8a:36:a2:e2:b8:55:5b:9b:19:0a:ca:82:
                    c4:21:39:ea:46:3a:22:88:7e:fa:95:aa:61:00:c5:
                    2b:b8:bf:4b:ca:b6:a5:e0:53:b4:86:28:19:20:e1:
                    5c:e7:a4:90:af:99:1b:1e:ac:0f:10:38:52:16:02:
                    bf:69:a5:c4:c8:29:a7:8d:0d:32:98:18:62:aa:66:
                    2c:7b:82:4c:6c:dc:b6:44:1d:61:cc:d2:9a:85:a6:
                    10:01:71:ea:85:42:48:85:07:0a:8c:2f:53:62:9f:
                    15:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C2:7F:26:47:FE:95:11:F8:CB:0D:71:E6:71:69:F8:5B:D7:2A:29
            X509v3 Authority Key Identifier:
                keyid:CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ba:ed:e6:9f:df:13:58:20:f6:7b:43:91:42:74:b9:b6:7d:
         83:d4:66:42:b8:59:fb:b1:7f:af:b1:7d:be:04:6a:a8:26:65:
         ae:47:45:42:cd:5e:85:1f:99:ff:44:e1:61:4f:5e:33:4e:19:
         79:cc:65:54:c3:82:73:f7:4a:02:32:49:94:38:07:92:57:ee:
         f7:10:fa:85:de:55:66:a5:74:0e:72:04:7f:b0:a5:e2:3a:cc:
         35:dc:05:30:c4:ec:6d:d1:71:51:f0:cf:d9:a9:76:e2:b0:7f:
         81:c7:83:e7:f6:3a:78:5e:2d:1a:c3:d9:4b:55:53:f6:16:e3:
         7d:b5:fe:15:0a:7a:84:d9:da:a9:78:4d:33:69:14:f8:8b:e6:
         fe:ea:46:11:22:79:82:da:2c:5a:79:99:7b:5a:f4:6e:de:88:
         6f:3a:94:33:ba:80:ed:f1:d9:0a:b6:91:ff:93:88:26:54:e7:
         d0:3d:85:4a:d0:68:c9:25:55:06:91:b8:f4:d4:a2:e7:a1:c1:
         fe:c2:b8:fc:da:a8:29:75:29:95:cf:39:e4:d0:db:38:6e:d5:
         a7:00:37:8f:2d:b2:57:7b:3c:0f:29:37:d9:c8:5f:3d:1d:5a:
         09:ef:98:2a:a2:8d:ff:d5:9b:0f:f9:7c:50:91:32:2d:95:f6:
         4c:96:5b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:26 2026 by rpki-client